Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,745Advisories collected

6,299Published or updated in 30 days

6,969Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 167 advisories

CurrentChecked 5 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked 25 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 101 advisories

Check delayedChecked 20 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 30 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 30 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,859 advisories

CurrentChecked 4 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 11 advisories

CurrentChecked 25 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 417 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

16,745 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-105733

Published Oct 13, 2026

CriticalCVSS 8.8

Windows Hyper-V Remote Code Execution Vulnerability

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

Affected productsWindows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for x64-based Systems

Fixed versions10.0.19044.7807, 10.0.19045.7807, 10.0.20348.5761, 10.0.22631.7652

Vendor guidance

Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-105733

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105016

Published Oct 13, 2026

CriticalCVSS 9.8

Microsoft QUIC Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems

Fixed versions10.0.20348.5761, 10.0.22631.7652, 10.0.26100.9711, 10.0.26200.9711

Vendor guidance

Release Notes Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646. Install KB5130034. Install KB5130035.

CVE-2026-105016

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102866

Published Oct 13, 2026

CriticalCVSS 8.1

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Affected productsMicrosoft SharePoint Server Subscription Edition

Fixed versions16.0.20326.20190

Vendor guidance

Install KB5002927.

CVE-2026-102866

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102857

Published Oct 13, 2026

CriticalCVSS 8.8

Microsoft Office Visio Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056

Vendor guidance

Release Notes

CVE-2026-102857

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102856

Published Oct 13, 2026

CriticalCVSS 8.8

Microsoft Office Visio Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056

Vendor guidance

Release Notes

CVE-2026-102856

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102855

Published Oct 13, 2026

CriticalCVSS 8.8

Microsoft Office Visio Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056

Vendor guidance

Release Notes

CVE-2026-102855

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102225

Published Oct 13, 2026

CriticalCVSS 8.8

Windows Text Shaping Remote Code Execution Vulnerability

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-102225

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102214

Published Oct 13, 2026

CriticalCVSS 8.8

Windows Hyper-V Remote Code Execution Vulnerability

Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-102214

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102211

Published Oct 13, 2026

CriticalCVSS 7.0

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2016, Windows Server 2016 (Server Core installation), Windows 10 Version 1809 for x64-based Systems, Windows Server 2019

Fixed versions10.0.14393.9612, 10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-102211

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-100220

Published Oct 13, 2026

CriticalCVSS 8.8

Windows Media Video Decoder Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-100220

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-100219

Published Oct 13, 2026

CriticalCVSS 9.8

Microsoft QUIC Remote Code Execution Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems

Fixed versions10.0.20348.5761, 10.0.22631.7652, 10.0.26100.9711, 10.0.26200.9711

Vendor guidance

Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-100219

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-100215

Published Oct 13, 2026

CriticalCVSS 7.8

Microsoft Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

Affected productsWindows 11 Version 26H2 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 11 Version 26H1 for ARM64-based Systems

Fixed versions10.0.26300.9711, 10.0.26100.33650, 10.0.28000.3231, 6.3.9600.23470

Vendor guidance

Install KB5127648. Install KB5126646. Install KB5127646. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653.

CVE-2026-100215

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-100202

Published Oct 13, 2026

CriticalCVSS 9.8

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-100202

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-78501

Updated Oct 13, 2026

CriticalCVSS 8.6

Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft 365 Copilot's Business Chat

CVE-2026-78501

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-97844

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-97844

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-97843

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-97843

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-97842

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-97842

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-97841

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-97841

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-97840

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-97840

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-97839

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-97839

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-97838

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-97838

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-97837

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-97837

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-97836

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2019 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems

Fixed versions10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807, 10.0.20348.5761

Vendor guidance

Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646. Install KB5126835. Install KB5126836. Install KB5126868.

CVE-2026-97836

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-97835

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-97835

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources